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ABSTRACT 


Due  to  the  advances  in  the  integrated  circuit  (IC)  technology,  more  and 
more  components  are  being  fabricated  into  a  tiny  IC  chip.  Since  the  number  of 
pins  on  each  chip  is  limited  by  the  physical  size  of  the  chip,  the  problem  of 
testing  becomes  more  difficult  than  ever,  especially  in  the  VLSI  (Very  Large 
Scale  Integration)  chips.  This  problem  is  aggravated  by  the  fact  that,  in 
nearly  all  cases,  integrated  circuit  manufacturers  are  not  willing  to  release 
the  detailed  circuit  diagram  of  the  IC  chip  to  the  users.  Yet,  as  users  of  the 
IC  chips,  to  make  sure  that  the  implemented  system  is  reliable,  we  need  to  test 
the  IC  chips  and  the  systems  made  of  the  interconnection  of  these  chips.  The 
purpose  of  this  project  is  to  find  efficient  algorithms  for  testing  LSI/VLSI 
chips  and  LSI/VLSI-based  systems. ^ 

'“This  report  is  organized  into  two  chapters.  Chapter  1  presents  the 
state-of-the-art  for  the  functional  testing  of  LSI/VLSI  devices  with  special 
emphasis  on  microprocessor  testing.  Various  types  of  IC  chips  are  briefly 
discussed.  Different  approaches  for\esting  the  functional  faults  of  LSI/VLSI 
are  surveyed  and  the  comparison  of  these’ methods  are  given.  Fault  models  for 
representing  the  faults  and  fault  coverage  of  the  tests  are  discussed.  Some  of 
the  important  unsolved  problems  and  current  trends  in  testing  VLSI  are  pointed 
out. 

v  Chapter  2  reports  our  new  research  results.  We  present  three  algorithms  to 
test  the  instruction  decoding  function  of  microprocessors.  ^The  algorithms  are 
based  on  the  knowledge  of  some  timing  and  control  information  available  to  users 
through  microprocessor  manuals  and  data  sheets.  The  tests  are  functional  in 
nature.  We  establish  the  order  of  complexity  of  the  algorithms  presented  in 
this  report.  As  an  example,  the  test  complexity  for  a  microprocessor  is 
computed  and  the  results  are  comoared  with  a  known  algorithm. 


CHAPTER  1 


Overview  of  Recent  Development  in  Functional  Testing 
of  LSI/VLSI  Devices 

I.  INTRODUCTION 

The  rapid  growth  of  the  integrated  circuit  technology  has  allowed  LSI/VLSI 
devices  to  provide  more  powerful  functions  and  to  become  more  and  more  popular 
in  various  kinds  of  commercial,  industrial  and  military  applications.  These 
complex  devices  need  to  be  tested  for  correctness  and  guaranteed  reliability 
before  being  adopted  in  an  individual  application.  What  makes  the  situations 
even  i larder  than  before  is  that  due  to  the  increasing  complexity  during  the 
design  and  manufacturing  process  of  such  chiiJs,  the  testing  problem  becomes  much 
more  difficult  to  handle.  In  view  of  the  high  complexity  of  VLSI,  classical 
strategy  for  gate-level  stuck-type  testing  can  hardly  fit  well.  The  need  for 
both  manufacturer  and  user  to  find  reliable,  low-cost,  good  testing  techniques 
lias  already  become  a  major  problem  in  modem  technology. 

Although  the  manufacturers  have  detailed  knowledge  of  the  logical  and 
parametric  behavior  of  the  chips  produced,  they  usually  do  not  apply 
comprehensive,  thorough  testing  to  their  products  mainly  due  to  economic 
reasons.  To  assure  reliable  operations,  additional  testing  needs  to  be 
performed  by  the  users.  Users  may  have  as  many  as  three  different  testing 
environments  —  ad  hoc  functional  testing  by  a  simple  test  circuit,  assembling 
production  test,  and  occasional  field  testing.  As  a  matter  of  fact,  due  to  the 
increasing  number  of  LSI/VLSI  users,  it  is  becoming  evident  and  more  important 
that  v/e  develop  good  test  generation  algorithms  to  test  these  devices  based  on 
whatever  information  is  available  to  users  in  manufacturers'  data  books  and 
aoplicaticn  notes. 


In  general,  we  should  consider  not  only  testing  the  conventional 
self-contained  single  chip  devices  (e.g.,  single  chip  microprocessor),  but  also 
tasting  other  special-purpose  devices  (e.g.,  bit-sliced  microprocessor), 


especially  in  military  applications  [16]. 

It  is  likely,  with  the  evolutionary  development  of  functions  contained  in 
newly  produced  chips,  that  much  more  complex  and  sophisticated  test  strategy 
will  be  needed  in  addition  to  whatever  built-in  testing  hardware  in  tne  ships 
for  increasing  the  testability. 

During  recent  years  certain  kinds  of  techniques  have  been  proposed  in 
testing  LSI/VLSI  devices.  They  all  have  attempted  to  derive  comprehensive 
functional  tests  using  the  limited  information  to  users.  To  deal  with  the 
complexity  of  VLSI  circuits  in  a  comprehensive  fashion,  these  approacnes  have 
used  abstract,  formal  descriptions  of  VLSI  behavior  different  from  traditional 
test  approaches. 

Some  testing  approaches  developed  so  far  are  based  on  the  utilization  of 
the  concept  of  register  transfer  language  (RTL)  to  describe  the  behavior  of  the 
devices.  With  tne  advent  of  the  more  advanced  VLSI  devices  (e.g.,  the  4-th 
generation  microprocessors)  in  which  certain  RTL  operations  in  the  system  may  be 
hidden  from  the  user,  it  is  obvious  that  either  the  existing  test  methods  should 
be  modified  or  different  but  similar  strategies  must  be  exploited. 

In  tills  chapter  we  attempt  to  summarize  the  current  state-of-the-art  on  the 
development  of  functional  test  techniques  for  LSI/VLSI  devices  with  special 
emphasis  on  the  important  area  of  microprocessor  testing.  The  second  section 
briefly  discusses  the  types  of  LSI/VLSI  chips  from  a  general  system 
organizational  point  of  view  and  their  individual  testing  approaches.  Section 
three  states  the  general  state  of  the  art  in  functional  testing  strategies. 
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alternatives.  One  simple  alternative  people  often  adopted  in  testing 
microprocessors  is  to  purchase  a  set  of  test  vectors  from  the  vendor  and  use 
them  to  test  the  purchased  chips.  However,  such  ad  hoc  analyses  usually  have 
only  been  made  on  the  chips  and  therefore  are  not  made  on  the  basis  of  a 
theoretical  model  with  provable  comprehensiveness.  Another  possible  approach  is 
to  run  a  pseudorandom  test  sequence  of  test  vectors  for  simplicity  and  minimum 
cost;  but,  to  derive  reliable  measures  of  fault  coverage  using  this  method  is  a 
nondeterainistic  problsra.  Actually,  the  reasonable  way  to  test  microprocessors 
is  to  use  those  tectniques  attempting  to  derive  high  fault  coverage  functional 
test  programs  using  the  limited  information  available  to  users  (e.g. ,  those 
contained  in  user's  manuals).  Formal,  abstract;  descriptions  of  processor 
behaviors  are  used  to  enable  the  proof  of  comprehensiveness. 

To  attack  the  high  functional  complexity  of  microprocessors,  modular 
decomposition  techniques  are  usually  used  to  subdivide  the  microprocessor  into 
functional  modules  whose  behaviors  could  be  individually  verified  using 
appropriate  test  procedures.  Two  situations  may  often  be  observed  in  testing 
microprocessors : 

1)  Testing  is  focused  on  data  path  functions.  The  fault  types  of 
ccntrol  path  is  usually  simplified. 

2)  Modules  and  tests  are  developed  on  an  ad  hoc  basis.  [7] 

The  order  of  test  sequence  is  of  major  concern  during  the  testing  of 
microprocessors.  Basically,  a  partial  or  total  order  is  looked  for  to  determine 
one  way  appropriate  for  testing  the  instructions.  This  order  is  usually  derived 
from  the  relations  of  dominance  and  associated  parameters  which  may  be 
structural  or  functional.  Two  well-known  test  organiations  can  be  applied: 
the  start  small  and  the  start  big  method.  The  start  small  method  tests  only  a 
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small  portion  of  hardware  and  then,  uses  the  tested  part  to  detect  the  fault  in 
other  parts.  Each  additional  test  adds  a  small  quantity  of  hardware  to  the 
previously  tested  parts  until  all  are  tested.  This  method  requires  an  ordering 
among  the  set  of  instructions  with  respect  to  testing.  The  start  big  test 
starts  with  the  verification  of  the  whole  system  to  determine  which  part  is 
faulty  and  proceeds  to  sequentially  narrow  down  the  region  in  which  the  fault 
occurs. 

The  testing  of  memory  chips  only  concerns  with  read  and  write  processes  of 
the  individual  storage  elements  and  can  usually  be  done  by  various  memory 
testing  strategies  [18].  Further  advanced  testing  of  real  world  memory  faults 
(e.g.,  intermittent  and  data  dependent  faults)  are  still  worthwhile  in  practical 
applications  which  require  high  reliability. 

III.  THE  STATE  OF  THE  ART  OF  TESTING 

There  are  mainly  two  trends  in  the  test  methods  for  LSI/'/LSI  devices.  The 
first  one  is  functional  tasting  wnich  generally  views  the  chip-under-test  as  a 
system.  For  example,  if  a  microprocessor  is  being  tested,  the  knowledge  of  the 
functional  oIock  diagram  allows  the  microprocessor  to  be  divided  into  physical 
blocks  sucn  as  arithmetic  logic  unit,  control  unit  and  so  on.  Each  block  is 
orara- ■ erized  by  its  function.  Testing  a  microprocessor  then  consists  of 
exercising  every  block  -with  specified  test  data  in  a  given  order.  In  general, 
test  data  can  be  one  of  the  following: 

1 )  Generated  in  randan  order . 

2)  Generated  in  a  deterministic  manner,  usually  a  model  is  set  up  based 
on  a  hign  level  functional  description. 


3)  Exhaustively  generated. 

The  second  method  is  structural  testing  which  assumes  (as  its  name 


suggests)  that  a  knowledge  of  the  detailed  structure  of  the  circuit  is  clearly 
known.  The  difficulties  which  arise  when  applying  this  kind  of  test  method  are: 


•  The  lack  of  knowledge  about  the  physical  defects  which  can  be  present 
in  the  new  technologies,  and 

•  Due  to  the  complexity  of  VLSI,  it  is  very  complex  to  enumerate  all 
faults  and  to  generate  the  tests  for  them. 

•  In  practice,  there  is  only  a  small  possibility  for  a  component  user 
to  know  tne  detailed  structure  of  the  device-under-use,  especially 
for  LSI/VLSI  devices. 

A  good  test  approach  usually  considers-  both  functional  and  structural 
failures.  Functional  testing  can  be  performed  while  taking  into  account  the 
knowledge  of  thfe  structural  information  to  obtain  enhanced  test  efficiency. 

IV  FAULT  MODELS  AND  FAULT  COVERACS  MEASURES 

To  simplify  the  evaluation  of  the  fault  coverage  in  digital  systems,  a 
ccmprenensive  fault  model  is  usually  set  up  and  then  the  fault  coverage  is 
evaluated  based  on  this  model.  One  interesting  way  to  set  up  the  functional 
level  fkult  model  of  digital  devices  other  than  microprocessor  (e.g.,  VLSI,  PLA) 
is  the  fault  characterization  tecimique  [14].  The  key  idea  is  to  derive  the 
functional  level  fault  model  by  simulating  physical  failures  at  the  circuit 
level.  Although  this  approach  has  primarily  two  limitations  of  being 
implementation  dependent  and  being  hard  to  attack  complex  VLSI  modules,  the 
latter  problem  can  be  solved  by  employing  a  two-step  method  simulating  the  large 
module  based  on  small  modules  and  multi-valued  algebra  [14]. 

There  are  two  kinds  of  fault  models  for  the  testing  of  microprocessors. 
One  is  called  the  universal  fault  model  which  takes  all  possible  faults  into 
account  and  no  faults  are  specific  to  any  functions  (but  may  be  specific  to 


instructions/ micro- instructions) .  The  other  is  called  functional  fault  model 
which  partitions  faults  into  several  types  according  to  different  functions. 
The  microprocessor  testing  approach  [12]  based  on  microprogramming  concept  uses 
the  universal  fault  model ,  whereas  the  graph  theoretic  method  [2]  adopts  the 
functional  fault  model . 

In  general,  fault  coverage  is  defined  as  the  ratio  of  faults  detected  to 
the  set  of  all  faults  considered.  For  simplicity  it  is  also  defined  as  the 
fraction  of  all  singly-occuring  faults  which  can  be  detected  by  a  given  set  of 
test  vectors  for  a  specific  device.  For  simplification,  only  the  permanent 
static  faults  are  considered  in  most  fault  measures  in  current  testing 
techniques  [9].  The  evaluation  of  fault  coverage  data  is  usually  done  by 
simulation  through  software.  Essentially,  the  simulator  models  the  responses  of 
n+1  circuits:  the  fault- free  circuit  and  the  n  single- fault  circuits.  The 
fault  simulator  results  are  often  only  approximations  to  those  actually  observed 
during  actual  circuit  testing.  This  is  true  even  if  the  simulator  modelled  all 
reasonable  types  of  faults. 

V.  CURRENT  FUNCTIONAL  TESTING  APPROACHES 


In  this  section,  first  of  all,  we  describe  three  major  approaches  for 
functional  testing  of  microprocessors  [1,2,3.4,12,13]. 

(a)  Graph  Theoretic  Approaches 

There  are  two  different  techniques  proposed  in  this  category.  In  [1],  each 
instruction  of  a  microprocessor  is  represented  by  an  "abstract  execution  graph" 
in  which  memory  elements,  including  source  and  destination  registers,  are 
represented  as  circle-shape  type-1  nodes,  and  the  microoperations  performed  by 
the  instruction  are  represented  as  square-shape  type-2  nodes.  An  example  of 


"AEDA  n,X"  from  the  MC6800  microprocessor  is  given  in  Fig  1 .  This  instruction 


first  computes  the  effective  address  by  adding  n  to  X,  using  this  effective 
address  for  fetching  the  operand.  Then  the  operand  is  added  to  register  A  and 
store  the  sum  in  register  A. 


Effective 

Address 

Calculation 


Operand 

Memory 

Fetch 


Arithmetic 

Addition 


Figure  1 

Two  strategies,  both  start  small  and  start  big  strategy  can  be  used  in 
generating  test  procedures.  The  start  small  testing  is  implemented  by  testing 
instructions  from  c^  before  instructions  from  class  c.+l ,  where  i  denotes  the 
order  of  the  class.  To  mate  the  tasting  automated  and  complete,  two  stages  of 
test  are  involved:  first,  verifying  the  structure  of  the  abstract  execution 
graph,  and  then  verifying  the  correct  function  of  each  node.  Memory  elements 
are  checked  by  running  appropriate  test  patterns  and  'every  nicrooperaticn  is 
checked  by  exhaustive  testing. 


A  different  graph  theoretic  approach,  [2],  proposed  another  method  which 
makes  use  of  register  transfer  level  description  of  microprocessors. 
Instructions  are  classified  into  three  types:  transfer  (T),  manipulation  (M)  , 
and  branch  (B).  A  directed  s-graph  is  derived  based  on  the  basic  functional, 
structural  information  and  instructions  set  in  which  a  node  represents  a 
register  and  each  edge  represents  execution  of  instruction.  An  example  of 
s-graph  based  on  a  part  of  a  hypothetical  microprocessor  is  given  below  and  the 
corresponding  graph  is  shown  in  Fig.  2. 

I*:  add  the  contents  of  and  R2  and  store  the  results  in  ^  (M-class) 

1^:  jump  instruction  (B-class) 

I,,:  store  R.j  into  the  main  memory  using  implied  addressing  (T-class) 

Rg:  program  counter 

In,  out:  external  memory  at  input/ output  devices 


The  microprocessor  functions  considered  in  this  method  are  register 
decoding,  instruction  decoding  and  control,  data  storage,  data  transfer,  and 
data  manipulation.  The  faults  specified  for  data  storage  and  transfer  functions 
are  conventional  stuck- type  faults.  A  valid  test  corresponds  to  the  execution 
of  a  sequence  of  instructions  which  transfer  complementary  data  patterns  from 
the  input  port  to  the  output  port.  The  faults  for  register  and  instruction 
decoding  are  failures  to  address  the  correct  register  or  to  execute  the  correct 
instruction.  Tests  for  these  faults  involve  tracing  the  sequence  of 
instructions  from  input  to  output  ports. 

(b)  Register  Transfer  Language  (RTL)  Technique 

Using  RTL,  the  behavior  of  a  microprocessor  is  comprehensively  described, 
and  functional  faults  derived  ftora  them  can  be  studied.  In  [4],  two  approaches 
for  functional  testing  are  given  based  on  the  RTL  description.  The  first 
approach  constructs  a  data  graph  from  the  RTL  description  and  uses  the  existing 
algorithm  such  as  the  D-algorithm  or  path  sensitizing  method  to  generate  the 
tests  for  functional  faults.  In  the  second  approach,  the  symbolic  simulations 
technique  is  used  to  generate  tests  for  detecting  faults  in  the  control  signals. 
In  [5],  a  formal  definition  of  RTL  is  defined  as: 

k:  (t,c)  Rd  ♦  f(Rs1,Rs2,...,Rsv),  n 
where, 

k  is  the  statement  label 

t  is  the  timing  and  c  is  the  condition  to  execute  the  statement 
is  the  destination  register 
Rgi  is  the  ith  source  register 
f  is  an  operation  on  Rs^ 
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-*-  represents  data  transfer 
-*•  n  represents  a  Jump  to  statement  n 
For  example,  the  following  RTL  statement  No.  17:  (T^Cg) 
when  Tj  =  CQ  *  1 ,  the  sum  of  R^  and  will  be  stored  in  Ry  and  then  the  program 
jumps  to  statement  No.  38. 

Based  on  the  above  notation,  eight  categories  of  fault  can  then  be  identified  as 
timing  faults  (t/t' ),  condition  faults  (c/c'),  register  decoding  faults  (R^/R^), 
instruction  decoding  (function  selection)  faults  (f/f),  control  faults 
(n/n'),  data  storage  faults  ((R,)/^)),  data  transfer  faults  (■«-/-►')  and  data 
manipulation  (function  execution)  faults  ((f)/(f' )).  This  set  is  functional 
comprehensive  because  the  behavior  of  a  CPU  can  be  described  by  a  sequence  of 
RTL  statement.  Three  procedures  for  testing  those  five  fault  categories  (except 
timing,  condition,  and  control  faults)  are  derived.  The  testing  requires  the 
creation  of  executable  sequences  to  form  a  ''sensitizing"  path  which  leads  from  a 
faulty  statement  to  a  statement  producing  faulty  output  information.  The  RTL 
technique  seems  to  be  a  promising  approach  for  functional  testing.  We  will 
discuss  this  more  in  the  next  section. 

(c)  The  Microprogram-Oriented  Technique 

This  technique  functionally  describes  a  microprocessor  as  a  set  of 
microprograms  derived  from  user  available  information  [12].  The  basic 
information  required  includes: 

1)  The  set  of  internal  registers  and  functional  units. 

2)  The  set  of  instructions  and  asynchronous  control  signals. 

3)  The  behavior  of  signals  at  external  pins  and  internal  operations  at 
each  clock  semicycle  which  can  generally  be  derived  from  the  timing 
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charts  in  the  user  manuals. 


Instruction  cardinality  is  defined  as  the  number  of  independent  (subsequent) 
access  to  registers.  In  [12],  it  is  shown  that  a  necessary  condition,  fcr  the 
nonambiguous  error  coverage  of  a  particular,  not  directly  observable, 
instruction  is  the  existence  of  a  testing  sequence  of  instructions  with  lower 
cardinality.  A  complete  test  requires  that  all  instructions  with  all  addressing 
modes  be  included  in  the  test  sequences.  The  microprogram-oriented  approach  is 
attractive  because  micro-instructions  are  basic  to  the  operation  of  the  control 
unit  and  nearly  all  of  the  current  new  microprocessors  are  basically 
microprogram  controlled.  Since  the  instruction  decoder  outputs  a  starting 
address  to  the  micro  control  store  which  subsequently  performs  a  set  of 
micro-instructions  corresponding  to  the  incoming  instruction,  the  length  of  the 
starting  address  is  a  critical  factor  because  it  eventually  determines  the 
efficiency  of  the  final  test  sequence.  If  one  can  generate  all  the  possible 
combinations  of  the  starting  address  patterns,  all  instructions  executions  will 
be  fully  exercised.  The  sharing  of  micro- instructions  among  different 
instructions  evidently  tends  to  reduce  the  number  of  different  starting 
addresses. 

The  above  three  testing  approaches  are  proposed  for  testing 
microprocessors.  Next,  as  for  large  scale  digital  devices,  the  extension  of  the 
D-algorithm  suitable  for  functional  level  testing  has  been  proposed  [13,15]. 
General  computer  hardware  description  language  constructs  (e.g.,  if-ther.-else, 
case)  and  operators  (e.g.,  addition)  have  been  used  to  describe  the  behavior  of 
the  general  logic  network.  Fault  model  similar  to  stuck-type  will  be  used  and 
the  classical  stuck-type  testing  technique  can  still  be  applied  without  major 
changes.  3y  building  the  basic  functional  blocks  from  elementary  components,  it 
seems  that  modular  composition  and  recursive  extension  can  easily  be  applied 


during  tiie  procedure  of  testing  which  in  turn  may  provide  great  flexibility  in 
adjusting  the  test  strategy. 

Memory  devices  have  been  tested  for  pattern  sensitive  faults  [18].  The 
functional  testing  of  memory  from  the  user's  point  of  view  is  to  apply  a 
sequence  of  "read"  and  "write"  to  check  the  storage  function  of  each  memory 
element. 

VI  COMPARISONS  AMONG  DIFFERENT  APPROACHES 

Each  of  the  three  different  approaches  in  testing  microprocessors  described 
in  the  previous  section  has  its  own  individual  advantages  and  shortcomings.  A 
brief  comment  on  each  is  given  below. 

Several  observations  can  be  made  about  the  method  in  [1],  First,  its 

i 

coverage  rests  on  the  exhaustive  testing  of  particular  functions  and  memory 

elements.  Hence  it  is  an  ad  hoc  method  and  will  be  specific  to  the 

dev ices-under- test  (e.g.,  MCS800).  Moreover,  it  presumes  a  black  box  view  of 

the  microprocessor  in  which  each  function  is  tested  independently.  These 

factors  lead  to  the  tests  of  excessive  length.  But  they  have  made  a  useful 

contribution  by  devising  a  simple,  rational  scheme  for  ordering  instructions 

according  to  easiness  level  of  controllability  and  observability. 

The  graph  approach  in  [2]  is  attractive  for  several  reasons:  First,  it  is 

based  on  the  minimum,  available  information  about  the  microprocessor  (e.g., 

instruction  and  register  sets) .  Second ,  microprocessor  operations  are 

decomposed  into  a  set  of  functions.  For  each  function,  a  specific  single  fault 

model  is  defined  and  a  comprehensive  test  is  rigorously  derived.  Third,  the 

fbult  coverage  was  verified  through  a  real  stuck-type  fault  simulator  which  is 

2  2 

obviously  very  convincing.  The  estimated  length  of  test  sequences  is  0(n^  n^) 

where  and  are  ^  0f  registers  and  instructions  respectively. 


To  improve  the  computational  efficiency,  [8]  proposed  a  simplified  fault  model 
with  revised  test  sequence  length  of  0(n^  *  n^).  The  major  shortcoming  of  this 
approach  is  that  it  does  not  include  partial  execution  of  instruction  and 
control  faults  which  can  be  provided  by  the  RTL  model. 

The  benefits  of  the  RTL  technique  are  its  generality,  clarity,  and  easy 
under standability  and  precise  description  of  the  behavior  of  a  given ’digital 
system.  Its  major  drawbacks  are  the  difficulty  in  automatic  generation  of  the 
RTL  description  from  the  available  information  about  the  chip-under- test ,  test 
generation,  and  the  fault  coverage  of  the  tests.  The  RTL  technique  also 
presents  particular  problems  in  fault  localization.  The  RTL  sequence  does  not 
uniquely  determine  the  way  the  microprocessor  was  implemented.  Though  RTL 
descriptions  provide  a  comprehensive  approach  to  define  functional  faults,  they 
still  are  subjective  to  the  problem  of  test  complexity. 

The  microprogram-oriented  approach  is  attractive  because  micro-instructions 
are  basic  to  the  operation  of  the  control  unit.  For  control  functions,  much 
saving  in  test  length  are  possible  for  microprogrammed  control  paths.  Like  the 
RTL  technique,  the  automatic  generation  of  the  proper  microcodes  is  still  an 
unsolved  problem.  The  error  coverage,  though  promising,  remains  to  be  proven. 
Also,  the  nature  of  the  control  path  architecture  may  make  fault  localization 
pretty  difficult  [7,12]. 

VII  CURRENT  IRENES 

Due  to  the  small  number  of  published  research  papers  with  solid  results  in 
this  functional  testing  of  LSI/VLSI  devices  field  [6],  and  the  increasing 
demands  of  such  kinds  of  techniques  from  industries,  functional  testing  is  still 
one  of  the  less-mature  but  most  active  areas  in  design  automation  (DA) 
development  and  the  quality  control  (QC)  process  [19]. 

14 


In  this  concluding  section,  we  would  like  to  point  out  briefly  some 
important  topics  which  are  either  under  active  investigation  or  require  more 
work  in  the  future. 

As  for  the  graph  approach  in  [2],  future  improvements  may  include  [2,8]: 

1)  Extending  the  architectural  model  to  incorporate  the  features  of  the 
never  microprocessors . 

2)  Allowing  for  more  general  faults. 

3)  Generating  tests  for  other  microprocessors,  e.g.,  bit-slice  ones. 

4)  Design  of  a  "compiler"  to  automatically  transform  the  microprocessor 
description  (e.g.,  at  RTL  level)  into  the  test  program. 

The  RTL  techniques  and  microprogram-oriented  technique  need  more  work  to 
obtain  complete  test  procedures  and  automatic  generation  and  verification  of 
behavior  description.  Good  techniques  for  measuring  fault  coverage  are  also 
needed  in  both  approaches.  Quantitative  fault  coverage  measures,  possibly  by 
computer  simulation,  are  attractive  for  the  demonstration  of  the 
comprehensiveness  of  those  approaches. 

Furthermore,  efficient  algorithms  should  be  developed  for  testing  VLSI  as 
well  as  digital  systems  containing  mixed  logic  (e.g.,  mixture  of  VLSI,  LSI  MSI, 
and  SSI  integrated  circuit  chips).  More  work  still  needs  to  be  done  in  using  a 
liardware  description  language  (HDL)  to  aid  the  generation  of  test  at  the 
functional  level.  A  solid,  comprehensive  definition  of  fault  coverage  in 
functional  level  and  its  practical  measure  should  also  be  developed  to  give 
criteria  Ln  Judging  the  quality  of  the  developed  algorithms. 
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CHAPTER  2 


New  Algorithms  for  Testing 
Instruction  Decoding  Function  of  Microprocessors 

I.  INTRODUCTION 

Recent  advances  in  LSI/VLSI  have  resulted  in  an  exponential  growth  of 
the  number  of  logic  components  in  an  integrated  circuit  (IC)  chip.  One  such 
complex  circuit  is  microprocessor.  To  ensure  the  reliable  operations  of 

microprocessors,  it  is  important  to  have  these  devices  tested  prior  to  their 
use.  Several  researchers  [1-6]  have  proposed  different  test  procedures  for 
testing  these  devices.  Some  of  the  more  important  approaches  are  briefly 
outlined  below. 

Thatte  and  Abraham  [1,2]  have  made  a  significant  contribution  by 

proposing  a  graph  model  for  microprocessors  and,  on  the  basis  of  the  graph 

model,  they  developed  test  sequences  to  test  a  microprocessor.  However,  we 

believe  that  this  method  does  not  make  use  of  all  the  information  that  is 

« 

available  to  a  user,  as  will  become  evident  in  the  subsequent  sections  of  this 
report. 

Min  and  Su  [3]  have  further  reduced  the  test  lengths  for  a  number  of 
different  classes  of  faults  in  microprocessors  but  they  do  not  consider  all 
faults  in  the  instruction  decoding  function  (control  unit) . 

Annartone  and  Sami  [4]  have  proposed  a  method  which  relies  on  the 
knowledge  about  micro-instructions  associated  with  each  instruction  of  a 
microprocessor.  The  major  limitation  of  the  method  is  that  some  instructions 
remain  untested. 

Parthasavathy,  Reddy  and  Kuhl  [5]  proposed  a  testable  design  to  make 
the  control  part  of  a  microprocessor  testable.  Thus  the  major  limitation  of 
their  method  is  that  it  is  not  applicable  to  existing  off-the-shelf 
microprocessors . 
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In  this  report,  we  propose  a  method  to  test  the  instruction  decoding 
function  of  a  microprocessor.  The  method  proposed  here  is  a  generalization  of 
the  approach  taken  by  Thatte  and  Abraham  [2]  and  results  in  considerable 
reduction  in  the  size  of  test  programs. 

In  Section  II,  we  describe  the  key  ideas  used  in  deriving  the 
algorithms  stated  in  this  report.  In  Section  III,  necessary  notations  are 
developed  which  are  used  in  Section  IV  to  derive  and  prove  different  algorithms 
for  testing  microprocessors.  Section  V  discusses  the  complexity  of  different 
algorithms.  We  also  consider  the  Intel  8080  microprocessor  as  an  example  and 
compare  the  complexity  of  different  algorithms  for  testing  the  instruction 
decoding  function  of  this  microprocessor.  In  Section  VI  we  present  an  algorithm 
to  detect  a  new  class  of  faults  and  discuss  its  complexity.  In  Section  VII  we 
briefly  outline  how  a  complete  microprocessor  can  be  tested. 
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II. _ KEY  IDEAS 

In  this  section,  we  describe  the  basic  ideas  used  in  this  report  to 
derive  the  necessary  algorithms.  Our  study  of  a  number  of  papers  in  the  area  of 
microprocessor  testing  [1-7]  indicates  that  often  the  existing  schemes  have  not 
made  use  of  all  the  information  available  to  users.  For  example,  almost  all 
microprocessor  manufacturers  provide  a  reasonable  amoint  of  timing  information 
about  their  products.  In  particular,  information  on  instruction  execution  time 
(in  terms  of  the  number  of  clock  cycles)  for  each  instruction  is  available  to 
the  users.  Such  information  for  a  microprocessor  can  also  be  measured  using 
simple  test  equipment.  In  the  development  of  our  first  algorithm,  we  divide  all 
instructions  into  different  sets  using  the  information  on  instruction  execution 
time.  The  new  objective,  then,  is  to  test  instructions  in  different  sets.  Thus 
a  larger  problem  is  solved  using  the  "divide  and  conquer"  strategy  by  solving 
several  smaller  subproblems. 

For  the  development  of  the  second  algorithm,  we  make  use  of  Read  and 
Write  signals.  In  this  scheme,  each  instruction  is  associated  with  an  ordered 
Read-Write  Sequence.  This  association  is  then  used  to  divide  the  set  of  all 
instructions  into  different  partitions,  and  as  before,  this  division  can  be  used 
to  our  advantage  to  solve  the  larger  problem  of  testing  all  instructions. 

In  the  last  algorithm  (Algorithm  3),  we  make  use  of  both  the  above 
information,  i.e.,  the  number  of  clock  cycles  and  the  Read-Write  sequence 
associated  -with  each  instruction  to  further  subdivide  the  instruction  set  and 
derive  the  necessary  tests. 
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In  the  following  section,  we  develop  the  notation  which  can  be  used  to 
divide  the  set  of  all  instructions  into  different  sets.  Thus  the  concept  of 
instruction  execution  time  in  terms  of  the  numbers  of  clock  cycles  and 
Read-Write  sequences  is  formally  defined  and  functional  notation  is  used  to 
obtain  the  partitions  of  the  set  of  all  instructions. 


III.  ASSUMPTIONS  AND  NOTATION 


In  this  section,  we  introduce  the  necessary  notation  and  present  the 
fault  model.  '  This  work  is  a  generaliation  of  that  of  Thatte  and  Abraham  [2] 
therefore,  the  notation  chosen  is  akin  to  that  work.  It  is  evident  from  the 
previous  work  of  different  researchers  [1-7],  and  also  pointed  out  by  Thatte 
[6],  the  most  complex  and  time  consuming  task  of  testing  a  microprocessor  is 
detecting  instruction  decoding  faults.  Ve,  therefore,  concentrate  on  reducing 
the  complexity  of  the  test-set  for  detecting  faults  in  the  instruction  decoding 
function.  The  set  of  all  instructions  for  a  microprocessor  is  denoted  by 
I  =  { 1^ ,  I_ , ...» In) .  The  type  of  faults  which  are  assumed  to  take  place  in 
instruction  decoding  function  are  as  follows  [2]. 


(i) 

(ii) 


Ij/ft  Fault  :  In  the  execution  of  an  instruction  Ij,  no 
activity  takes  place  in  the  microprocessor. 


I ./I,  Fault  :  In  the  execution  of  an  instruction  I.,  a 

.1.  . .  J 


different  instruction  1^  is  executed. 


(iii) 


IJli+I,,  Fault  :  In  the  execution  of  an  instruction  I., 

_ J _ £ _  J 


two  instructions  Ij  and  1^  are  executed  and  both  instructions 


.  are  executed  to  completion. 

Note  that  to  verify  that  a  fault  iyi^  is  not  present  we  need  only  to 


execute  I.  and  observe  that  I.  is  executed  correctly.  However,  to  assure  that  a 

J  J 


microprocessor,  is  free  of  fault  I./I.+I,.,  we  must  verify  the  I .  is  executed 

J  J  fw  J 


correctly  whereas  I,  is  not  executed  at  all.  Thus  it  is  evident  that  the  most 


time  consuming  task  is  the  detection  of  the  third  type  of  faults  I./I.+I.  ,  as  in 

J  J  K 

this  case  we  need  to  consider  all  possible  pairs  [6]. 


Thus  the  order  of  complexity  for  the  test  program  is  proportional  to  HI,  where 

|I|  denotes  the  cardinality  of  set  I.  Since  |I|=n,  the  order  of  complexity  is 

C ( n  ) .  We  shall  show  that  the  size  of  test  programs  can  be  reduced  considerably 

by  partitioning  the  instruction  set. 

The  execution  of  a  program  involves  the  fetch  and  execute  steps  for  an 

instruction  and  then  the  next  instruction  fetch  cycle  begins.  Let  T(I.)  be  the 

J 

number  of  clock  cycles  required  for  executing  an  instruction  I.  (including  its 

J 

fetch  phase)  before  the  next  instruction  in  the  program  is  fetched.  Notice  that 
this  information  is  supplied  by  the  manufacturers  of  microprocessors  [8-11]. 
Furthermore ,  T(I^)  for  every  I^el  can  be  measured  for  a  given  microprocessor. 
At  this  stage,  the  following  remarks  are  in  order. 

Remark  1 :  T(Ij)  is  not  the  total  time  for  fetching  and  execiition,  because  for 

certain  instructions,  the  execution  phase  may  overlap  with  the  fetch  phase  of 

the  next  instruction.  Therefore,  we  have  defined  T(IJ  to  be  the  time  for 

J 

executing  instruction  I.  before  the  next  instruction  is  fetched. 

u 

Remark  2:  For  certain  instructions,  T(I^)  is  a  range  instead  of  a  unique 

integer.  Two  examples  are  MUL  (multiplication)  and  DIV  (division)  instructions 

in  Intel  9C36  microprocessor.  For  simplicity,  the  following  theorems  and 

algorithms  shall  assume  T(Ij)  to  be  a  unique  integer.  It  is  conceptually  simple 

and  straightforward  to  extend  our  results  to  microprocessors  for  which  T(I.)  is 

J 

a  range. 
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Definition  1:  F1  is  a  function  mapping  I  into  the  set  of  all  integers, 

Z  (F1 :  I-Z),  i.e.,  F^IjJ^Tdj),  I^el. 

Also,  let  «  max  {T(Ij)/ Vl^el}. 

Definition  2:  Partition  the  set  I  into  subsets  I1,  I^,...^  as  follows: 

■  I1  -  dj/Ijel  and  T(Ij)  -  i} 

Denote  !  I1  l-n^  ,-s.isk^ . 

Note  that  some  such  partitions  can  be  empty. 

*1  i 

Remark  3:  It  is  evident  that  u  I  =  I 

i=1 

Remark  4:  I1  is  a  partition  (non-overlapping  subset  of  instructions)  if  T(Ij) 
is  a  single  integer  associated  with  1^.  If  T(Ij)  is  a  range,  the  above  method 
may  or  may  not  result  in  partitions.  However,  with  minor  modifications,  the 
results  of  this  paper  will  still  apply. 

We  also  observe  that  a  read-write  sequence  (R-W  Sequence)  is  associated 
with  every  instruction.  For  example,  in  Intel  8080  [8]  the  instruction  "MVI 
(Hove  Immediate)  data ,  M"  consists  of  the  following  R-W  sequence: 

(i)  The  instruction  is  fetched  -  Read  Cycle  (R) 

(ii)  The  data  is  read  from  Memory-Read  Cycle  (R) 

(iii)  The  date  is  written  to  the  Memory-Write  Cycle  (W) 

Thus  an  ordered  R-W  sequence,  RRW,  is  associated  with  the  instruction  "MVI  data, 
M."  Clearly,  this  sequence  can  be  determined  for  every  instruction. 
FVurthermore ,  it  can  be  observed  by  monitoring  the  read/ write  control  signals  of 
a  microprocessor  for  a  given  instruction  under  execution.  Some  microprocessors 
have  even  additional  information,  e.g.,  idle  period  which  is  not  included  here 
to  keep  the  treatment  general .  In  fhct,  our  study  suggests  that  often  more  than 
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simply  read/writa  information  is  available  for  most  microprocessors, 
concept  is  formally  defined  below. 


Definition  3:  A  set  be  a  set  of  ordered  R-W  sequences  of  length  no 
more  than  starting  with  R,  written  as  *{R(R,V/)i;  Osi^} .  For 


an  element  aeSj^  we  denote  the  length  of  a  as  4g(a) 


Example  1;  S^R} ,  S2«{R,RR,RW} , 

Sj»{R,RR,RW,RRR,RRW,RWR,RWW} ,  etc. 

£g(RR)  »  2,  ig(RRW)  *  3* 

Definition  4:  F 2  is  a  function  mapping  I  into  S^(F2:  ^  )  •  for 

some  y  x  .e  •  * 

F_(I . )  a  R-W  sequence  associated  with  I. 

*  J  •  J 


<3-1  Jp  j-T 

R  V  ^  R  5 


where  R  is  R  repeated  ^  times.  Clearly,  is  equal  to  the  length  of 
tiie  longest  R-W  sequence  for  some  instruction. 


Definition  5:  Partition  set  I  into  subsets  as  follows:  let 


I °  =  Uyi^cl  and  F2(Ij)  -a  } 


% 


then 


The  number  of  such  nonempty  partitions  is  finite.  In  fact,  an  upper  bound 


*2 


on  the  number  of  such  partitions  is  2  -1 . 


__  ..  ..  _  .  ......  _  .......  .  _  _  ,  .  j  .  .  . 
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IV.  THEOREMS  AND  ALGORITHMS 

In  this  section,  we  state  and  prove  some  theorems  and 
algorithms  for  testing  faults  in  the  instruction  decoding  function. 

Lemma  1 :  If  Ij  e  I*  and  Ik  e  1 2  then  for 

(i)  iyik  fault  T(iyiK)  -i 

(ii)  iyij+Ik  fault  T(iyij+Ik)  -  max  (i,z). 

Proof: 

(i)  It  is  straightforward  to  see  that  if  instruction  Ik  is 

executed  instead  of  I .  then 

O 

T(yxk)  -  Tdk)  *  i . 

(ii)  If  a  fault  yyXk  is  present,  then  by  our  assumption  on 
faults  both  1^  and  Ik  must  execute  to  completion.  Therefore 
T(yyik)  =  max(T(y,T(Ik)) 

»  max(i,0 

Corollary  1 :  l£  IjeIi,IkeI£and  Ifl  then  fault  Ij/Ik 
can  be  detected  by  executing  1^  alone  and  observing  T(Ij) 

Lemma  2:  If  yi1,  IkeI*  and  1<Z  then  fault  yij+Ik  can  be 
detected  by  executing  I.  alone  and  observing  T(I.). 

Proof:  Clearly  in  the  presence  of  fault  yyik  the  observed  value 

T(Ij/yik>  3 

*  t 

Thus  tc  ij)  p  T(yyik). 


v>: 

V  / 


■ 

£$•: 

■>nj- 


hi 
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Therefore ,  observed  and  expected  values  will  be  different  in  the  presence  of  the 


Normally,  to  detect  faults  Ij/I^+I^  one  would  need  to  test  for  every  pair 

(II)  [2,6].  However,  the  implication  of  the  above  lemma  is  that  we  need  not 
J  K 

consider  all  pairs  of  instruction  while  testing  the  instruction  decoding 
function.  Thus,  in  the  following  algorithm,  we  execute  each  instruction  1^  and 
determine  T( )  then  in  the  succeeding  step  we  test  for  faults  etc., 

using  the  partitions  obtained  in  the  previous  section. 

In  Step  2  of  the  following  algorithm,  we  do  not  present  procedures  to 
generate  subprograms  to  test  for  faults  1^/$  ,  Ij/I^  and  Ij/I^+I^  for  given  Ij 
and  I,  .  One  could  use  the  procedure  by  Thatte  and  Abraham  [2]  for  generating 
subprograms . 

t 

Algorithm  1:  Algorithm  to  Detect  Faults  in  Instruction  Decoding  Function 


Using  Function  F1 . 

Step  1 :  Execute  an  instruction  1^  and  observe  T(I^)  for  all  I^el. 

Step  2:  For  i=1  to  do 
begin 

For  all  Ij.I^I1 
begin 

(a)  Test  for  fault  iy$  . 

(b)  Test  for  fault  1^/1^ 


(c)  Test  for  fault  Ij/1^+1^ 


For  i :*1  to  i-1  do 


begin 


(d)  For  all  lef  ,  test  for  fault  I./I.+I 


Theorem  1:  Algorithm  1  detects  all  faults  in  the  instruction  decoding  function. 
Proof:  By  Corollary  1  and  Lemma  2,  all  faults  of  the  following  types  are 

detected  in  Step  1 . 

(i)  faults  iyik  with  T(Ij)  *T(Ik) 
and 

(ii)  faults  with  T(Ij)<T(Ik). 

Step  2(a)  detects  faults  of  type  Ij/$. 

Step  2(b)  detects  faults  of  type  Ij/Ik  with  T(Ij)»T(Ik) 

Step  2(c)  detects  faults  of  type  1^/1^+^  with  T(Ij)=T(Ik) 

Step  2(d)  detects  faults  of  type  with  T(Ij)>T(Ik) 


Thus  all  faults  are  detected  by  Algorithm  1 . 

We  know  proceed  to  the  development  of  second  algorithm  by  making  use  of 
R-W  sequences.  The  following  lemmas  are  established  before  tlie  algorithm  is 
stated. 

Lemma  j:  If  1^  ela  and  IkeIS  then  for  fault  Ij/Ik  we  have  F 2  (Ij/Ik)  =  0 
Proof:  Clearly,  F2(Ij/Ik)  *  F2(Ik)  -  B 

3  0 

Corollary  2:  If  Lj  si  and  Ik£I  and  c^S  then  fault  I^/Ik  can  be  detected  by 
executing  I.  alone  and  observing  F0(I .) . 


Vwyv>v  p>»; 


Definition  8;  Let  a.BcS^and 

a  =>  •  •  •  »X 

8  -  RY2Y3,...,Y^ 

then  au8=*  RCX^K^uYj)  ,.  ..,(X  u  Y  )  ^  +1  . Y^ 

where  u  denotes  set  union. 

Lemma  4:  If  I^ela  and  I^e  I8  then  for  fault  I^/Ij+I^ 

WW  3  aue 

Proof:  In  the  presence  of  fault  Ij/I.+I^,  the  oDserved  R-W  sequence  will  be  a 

union  of  R-W  sequences  for  I.  and  I,  .  (Note:  "Union"  in  this  context  does  not 

J  K 

mean  logical  OR.  In  fact  it  only  means  that  when  both  R  and  W  signals  are  put 
« 

on  Hie  control  line  at  the  same  instance,  the  associated  control  lines  will  have 
tne  identical  logical  value.  This  is  different  from  the  situation  where  only 
one  of  the  two  control  signals  is  active.) 

Corollary  3:  If  I.-.eIa  and  I, .el8  and  Ia<Is  then  for  fault  I^/I^+I,, 

- - —  j  k  J  J  A 
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Lemma  5:  Let  I^el3  ,  I^el8  .  A  fault  Ij/I^+I^  can  be  detected  by  executing  1^ 
alone  and  observing  F2(Ij)  provided  either  one  of  the  following  two  conditions 
is  satisfied. 

(a)  ig(a)<£g(8) 

(b)  ig(a)>eg(s)  and  I8£Ia, 

where  £g(a)  denotes  the  length  of  Read-Write  sequence  a  . 


Algorithm  2:  Algorithm  to  Detect  Faults  In  Instruction  Decoding  Function 


Using  Function  F^: 

Step  1:  Execute  an  instruction  I .  and  observe  the  Read-Write  sequence 

u 

associated  with  I^,i.e.f  F^CIj)  for  all  I^el. 

Step  2:  For  every  ae&.  do 

a 

begin 

For  all  I.,IkeIa 
begin 

(a)  Test  for  fault  1./$ 

J 

(b)  Test  for  fault  I^/I^ 

(c)  Test  for  fault  I^/I^+I^ 

end 

For  8<a  do 
begin 

For  all  I  el®  test  for  fault  I./I.+I 
P  J  3  P 

end 

end. 

Theorem  2:  Algorithm  2  detects  all  faults  in  the  instruction  decoding 
function. 

Proof:  The  proof  is  similar  to  the  proof  of  Theorem  1 . 


We  have  stated  two  independent  algorithms  for  testing  the  instruction  decoding 
function  of  a  microprocessor.  It  is  felt  that  the  above  two  algorithms,  if 
merged,  result  in  an  algorithm  which  will  perform  better  than  either  of  the 
above  two  algorithms.  We  will  not  state  the  necessary  lemmas  but  the  basic 
idea  is  as  follows. 

Each  subset  I*  can  be  further  partitioned  into  smaller  subsets  by 
defining  function  F2  from  I*  to  Si. 

We  use  Algorithm  1  to  test  faults  in  I1  and  1^  classes.  To  test 
instructions  in  I1  for  different  faults,  we  can  use  Algorithm  2.  Formal 
statement  of  the  algorithm  is  as  follows: 

Algorithm  3:  Algorithm  to  Detect  Faults  in  Instruction  Decoding  Function 
Using  Functions  F^and  Fg. 

Step  1 :  Partition  I  into  Subsets  {I1}  using  function  F^ . 

Step  2:  For  i=1  to  ic,  do 
begin 

(a)  Partition  I1-  into  subsets  {1°}  using  function  F2  and  use 
Algorithm  2  to  detect  faults  in  the  instructions  within  each 
subpartition. 

(d)  Use  Algorithm  1  to  detect  the  remaining  faults. 
end. 

The  above  algorithm  can  also  be  stated  by  interchanging  the  order  of 


application  of  F^  and  F2,  i.e.,  in  Step  1,  F2  can  be  used  to  partition  I  and 
then  in  Step  2,  each  partition  obtained  in  Step  1  can  be  further  subdivided 
using  Function  F^ . 


i 

j 

I 

i 

1 
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V.  COMPLEXITY  OF  THE  ALGORITHMS 

In  this  section,  we  calculate  the  complexity  of  our  algorithms  and 

compare  our  results  with  a  well-known  algorithm  [2,6].  As  our  algorithm  relies 

on  known  methods  of  generating  test  subprograms,  we  first  determine  the  length 

of  such  programs  to  compute  the  complexity  of  our  algorithms. 

Thatte  and  Abraham  [2]  have  shown  that  the  length  of  test  programs  is 

determined  by  the  tests  which  detect  faults  They  also  give 

algorithms  to  detect  these  faults.  In  their  procedure  one  needs  to  consider 

2 

all  possible  pairs  (1^,1^).  As  the  number  of  such  pairs  is  in  the  orders  of  n  , 
2  2 

denoted  by  0(n  ) ,  the  test  complexity  is  Q(n  ) .  Let  us  assume  that  the  actual 
2 

test  siae  is  c.n  where  c  is  a  constant  of  proportionality.  As  we  propose  to 
use  their  algorithm  for  generating  test  programs  for  faults  Ij/I^+I^,  we  need 
not  know  the  value  of  c  to  determine  the  relative  performance  of  our 
algorithms. 

The  following  theorems  give  the  complexity  of  Algorithms  1  and  2. 

Theorem  3:  The  complexity  of  Algorithm  1  is 

fc,  i  , 

o(  s1  z  iru^n 

i»1  q=1 

Proof:  As  stated  above,  the  complexity  is  determined  by  the  number  of  faults  of 
type  I^/I^-t-I^  for  which  we  need  to  test  the  pair  (1^,1^). 

As  is  evident  from  Algorithm  1  and  the  associated  lemmas,  many  such 
pairs  need  not  be  considered.  Oily  those  pairs  (1^,1^)  for  which  T(Ij)  T(Ik) 
need  to  be  considered. 

Using  this  argument  it  is  a  simple  matter  to  obtain  the  required  order 
of  complexity. 

34 
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Theorem  4: 


The  complexity  of 

0(  Z  Z 
cteS^  S<a 


Algorithm  2  is 

|Ia||I8I) 


Proof;  The  proof  is  similar  to  the  proof  of  Theorem  3.  ' 

A  similar  expression  for  the  complexity  of  Algorithm  3  can  be  written. 
As  sucn  an  expression  warrants  only  complex  notation,  it  is  not  included 
here.  However,  in  the  following  example,  we  compute  the  complexity  of  all 
three  algorithms  and  compare  the  result  with  the  complexity  of  Algorithm  in 


[2,6]. 


Example  3:  Let  us  consider  the  Intel  8080  [8]  microprocessor.  For  this 
processor  | I 1=72.  In  this  processor,  some  of  the  instructions  can  be  tested 
independently  out  to  keep  the  task  of  comparison  simple,  we  assume  that  we 
need  to  consider  all  ( Ij ,  1^)  pairs.  . 

(i)  Using  the  algorithms  by  Thatte  and  Abraham  [2],  the  size  of  the 
test  program 
TATP  =  c.n2 


=  c.(72)2 
=■  5184  c. 

(ii)  Algorithm  1  results  into  different  partitions  as  follows; 
Let  us  denote  IIil  as  n^,  we  then  obtain 
n1  =n2an3=Vn9=n1 4=0, 5=0,  ^0 

n4*20,  n^=7,  n^=1 ,  ny^21 ,  o,q*13,  n^*3» 

n13*2’  nl6=4’  n18a1* 

18  i 

Z  Z  n.n  =  3137 
i«1  q-1  1  q 
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Therefore,  the  size  of  the  te*-t  program  by  Algorithm  1  is 
AL1TP  -  3137  c. 

(iii)  Algorithm  2  results  into  different  partitions  as  shown  below. 


R 

RR 

RW 

RRR* 

RRW* 

RWV  RRRR 

RRRW  RRRRR  RRRWW 

II  1  29 

19 

2 

8 

4 

3  1 

1  1  4 

£  £  |IallISl  =  2969 

ct  Ssa 

Therefore,  the  size  of  the  test  program  by  Algorithm  2  is 


AL2TP  *  2989  C. 

(iv)  Algorithm  3  results  in  different  partitions  as  shown  in  the 
following  table. 


Clocks 

R-W  Seq. 

4 

5 

6 

7 

10 

11 

13 

16  18 

R 

20 

7 

1 

1 

RR 

19 

RW 

2 

RRR 

7 

1 

RRW 

4 

RWW 

1 

2 

RRRR 

1 

RRRW 

1 

RRRR 

1 

RRRWW 

3  1 

*  IN  and  OUT  instructions  have  been  included  in  RRR  and  RRW  respectively  to 
keep  the  treatment  simple. 
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The  size  of  the  test  program  by  Algorithm  3 


AL3TP  -  2761  c. 


Comparison  of  (ii),  (iii)  and  (iv)  with  (i)  shows  that  these  algorithms  reduce 
the  test  program  size  by  about  4056. 

We  have  also  considered  other  microprocessors,  e.g.,  Intel  3085  [8], 
8086  [9],  Motorola  6800  [10],  Z80  [11]  and  found  that  our  partitioning  methods 
are  applicable  to  these  microprocessors  and  typical  saving  in  the  size  of  test 
program  is  of  the  above  order. 


VI. 


SYMMETRIC  FAULT  MODEL 


In  previous  sections,  we  have  considered  faults  iyi^+I^  and 
I^/I^+Ij  to  be  two  distinct  faults.  However,  if  some  information  about  the 
design  of  the  control  unit  is  available,  then  some  of  the  conditions  on  the 
fault  model  can  be  modified . 

For  example,  consider  the  microprogrammed  implementations  of  a  control 
unit.  In  such  an  implementation  of  the  control  unit,  a  stick-type  fault  will 
always  cause  the  execution  of  some  micro-instructions,  but  a  bridging  fault 
between  two  control  signals  will  cause  either  both  controls  to  be  active  or 
inactive.  Such  a  fault  model  is  defined  below. 

Definition  9:  A  fault  iyi^+I^  is  symmetric  if  the  presence  of  fault  iyiyl^ 
implies  the  presence  of  fault  and  vice  versa.  The  following  lemma  and 

theorems  can  be  proved  using  similar  arguments  as  in  the  previous  two  sections. 
Lemma  6:  If  I..el  ,  I,. el  and  i»*  then  symmetric  fault  I^/I^+I,.  can  be  detected 

.  J  J  J  K 

by  executing  Ij  and  1^  and  observing  T(iy  and  T(I^) . 

Proof:  If  i<z  then  execution  of  Ij  will  detect  the  fault  whereas  if  i>£  then 
execution  of  1^  will  detect  such  a  fault. 

In  the  case  of  symmetric  faults,  Algorithm  1  is  modified  by  eliminating 
Step  2(d);  we  shall  call  it  Algorithm  1M. 

Theorem  5:  Algorithm  1M  detects  all  symmetric  faults  in  instruction  decoding 
function. 

Theorem  6:  The  complexity  of  Algorithm  1M  is 

0(  E1  ll1!2). 
i-l 

Analogous  results  can  be  obtained  by  using  R-W  sequences. 


VII.  CONCLUSION 


In  the  previous  sections,  we  have  described  algorithms  to  test  the 
instruction  decoding  function.  To  test  a  microprocessor  completely,  we  can 
adopt  the  following  strategy. 

(a)  Register  decoding  function  can  be  tested  by  using  methods  proposed  in  [2] 
and  [3].  To  detect  faults  in  registers,  test  procedures  identical  to  testing 
semiconductors  RAMs  [12,13]  can  be  used. 

(b)  For  detecting  fhults  in  data  paths  procedures  given  in  [2,3,6]  can  be  used. 

(c)  ALU  faults  can  be  tested  by  complete  tests  derived  for  a  given  realization 
or  by  random  test  sequences. 

(d)  Instruction  decoding  function  faults  can  be  detected  by  the  algorithms 
given  in  this  paper,  in  conjunction  with  the  algorithms  given  in  [6]. 

The  algorithms  presented  in  this  report  are  valid  for  a  number  of 
microprocessors  we  have  considered  [8-11],  In  our  treatment,  we  have  used  only 
tne  information  which  is  common  to  all  these  microprocessors,  thus  for  any  given 
microprocessor  the  actual  complexity  of  the  tests  is  lilcely  to  be  even  less  than 
the  complexity  determined  in  this  report. 
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APPENDIX 


Report  for  Trip  to  Jordan  and  Israel,  1583- 

Recently,  I  was  Invited  to  give  a  paper  entitled  "Computer-aided  Design 

and  Testing  of  Digital  Systems  and  Circuits"  at  the  Jordan  International 

Electrical  and  Electronic  Conference  which  was  held  in  Amman,  Jordan  April 

25-28,  1963.  The  talk  was  very  well  received  and  various  good  comments  were 

made  by  the  attendees  from  all  over  the  world.  In  this  talk,  I  presented  the 

recent  development  and  pointed  out  the  future  directions  in  the  important  area 

of  computer-aided  design  and  testing  of  digital  systems  -  I  also  introduced  our 

project  sponsored  by  the  Army,*  outlined  the  key  ideas  and  obtained  feedback  from 

tne  audience.  Professor  Sergio  Brofferio  of  Politechnic  Di  Milano,  Milano, 

Italy  is  so  interested  in  this  project  that  he  invited  me  to  go  to  his 

« 

institution  to  present  in  detail  my  research  results  and  to  discuss  research 
with  their  research  group.  Professor  Broferrio's  speciality  is  in  the  VLSI 
area.  We  had  a  lot  of  discussions  on  the  subject  which  enhances  this  Army 
research  project.  He  is  also  interested  in  the  applications  of  VLSI  in  the  area 
of  video  conferences.  His  colleague,  Professor  M.G.  Sami  is  working  in  the 
testing  of  VLSI  using  microprogrammed  approach.  One  of  his  recent  publications 
has  been  cited  in  this  report.  His  work  is  pretty  close  to  my  project  for  the 
Array .  I  plan  to  discuss  VLSI  testing  with  him  in  Italy. 

I  have  also  interacted  with  the  following  professionals. 

1)  Dr.  M.  Maqusi,  Dr.  I.  Zabalawi  and  Dr.  M.K.  Abdelazuz  of  the  University 
of  Jordan. 

2)  R.C.V.  Macario,  College  of  Swansea,  Swansea,  United  Kingdom. 

3)  Professor  K.R.  Rao,  University  of  Texas  at  Arlington. 

4)  Professor  L.C.  Ludeman,  New  Mexico  State  University. 


Mr.  S.Y.  Duda  of  the  University  of  Cairo  is  doing  research  on  the 
applications  of  microprocessors.  He  hopes  to  come  to  SUNY-B inghamton  for  his 
graduate  studies. 

Since  the  scope  of  the  conference  was  broad,  it  helped  to  enhance  my 
technical  knowledge  in  various  parts  of  electrical  engineering.  Perhaps  the 
idea  of  testing  can  be  applied  to  other  areas. 

I  was  invited  to  visit  the  Computing  Center  of  the  University  of  Jordan 
aid  give  them  some  advice  regarding  the  new  computers  which  they  want  to 
purchase . 

I  was  invited  to  give  a  talk  at  the  Technion-Israel  Institute  of 
Technology  at  Haifa,  Israel .  Technion  is  the  finest  University  in  Israel  in  the 
area  of  Computer  Science  and  Computer  Engineering.  The  talk  was  entitled 
"Testing  of  VLSI."  The  purpose  of  this  talk  was  to  report  the  research  ideas 
and  results  of  try  Army  project  and  obtain  some  comments  and  suggestions.  I  also 
had  extensive  discussions  with  Professor  M.  Yoeli  and  Z.  Kohavi.  The  follovi 
comments  and  suggestions  were  made  from  them  and  the  audiences  of  my  talk. 

1)  The  idea  of  using  RTL  (Register  Transfer  Language)  to  describe  the 

behavior  of  the  LSI/VLSI  chips  and  borrowing  the  existing  methods 
for  testing  gate  level  networks  to  the  RTL  level  is  very  interesting 
and  has  a  lot  of  potential  in  helping  solve  the  difficult  problems  of 
testing  VLSI. 

The  enumeration  of  all  faults  may  be  complex.  The  equi 
classes  for  functional  faults  should  be  found  first. 


2) 


3) 


Since  the  RTL  description  is  not  unique,  how  do  we  know  the  RTL 


description  corresponds  to  the  actual  circuit  behavior? 


Further  research  should  be  dene  in  the  area  of  effectiveness  of  test 


generation  algorithm,  in  terms  of  fault  coverage  and  computing  time. 


Comparison  between  symbolic  simulation  and  data  graph  approaches 


described  in  Su  &  Hsiech's  paper  "Testing  Functional  Faults  in 


Digital  System  Described  by  Register  Transfer  Language"  will  be 


interesting  and  worthwhile. 


The  RTL  description  allows  one  to  describe  the  behavior  more  closely 


than  high  level  languages.  The  RTL  model  may  be  able  to  handle  the 


fault  for  partial  execution  of  an  instruction  which  cannot  be  done  by 


the  existing  techniques. 


I  have  had  a  great  deal  of  interaction  with  M.  Baba  of  West  Bank,  who 


is  interested  in  coming  to  SUNY-Binghamton  to  work  on  my  Army  research  project. 


I  also  interviewed  V.G.  Habesh  and  AreeJ  El-Majed,  the  other  two  applicants  for 


this  project. 


Overall,  the  trip  was  very  worthwhile  and  beneficial  to  the  project. 


Suggestions  were  very  helpful  for  the  future  progress  on  this  project. 
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